CompTIA Sec+

What is managerial security controls?

Intro Managerial security controls play a crucial role in protecting an organization’s IT infrastructure. These controls involve policies, procedures, and oversight mechanisms that guide the behavior of employees and ensure…

What is a technical security control?

TLDR Technical security controls refer to the security measures that organizations implement using technology to protect their systems, networks, and data. These controls aim to safeguard critical infrastructure from cyberattacks,…

What is Whaling?

TLDR Whaling is a type of phishing attack that targets high-ranking individuals within an organization, such as executives, CEOs, CFOs, or senior managers. These attacks are more sophisticated than regular…

What is Eliciting Information?

TLDR Eliciting information is a technique used to subtly extract sensitive or valuable details from individuals without directly asking for them. It often involves casual conversations where the subject is…

What is Tailgating?

TLDR Tailgating is a common social engineering tactic where an unauthorized person gains access to a restricted area by following closely behind an authorized individual. This method exploits the trust…

What is Pharming?

TLDR Pharming is a type of cyberattack that redirects users from legitimate websites to fraudulent ones without their knowledge. It manipulates the website’s DNS (Domain Name System) or compromises the…

What is Shoulder Surfing?

TLDR Shoulder surfing is a type of security breach where attackers visually observe sensitive information, such as passwords, PINs, or confidential data, by watching over someone’s shoulder as they enter…

What is Dumpster Diving?

TLDR Dumpster diving is a technique used by attackers to gather sensitive information by searching through an organization’s or individual’s discarded materials. These materials, often found in trash bins or…

What is Spear Phishing?

TLDR Spear phishing is a targeted form of phishing where attackers focus on specific individuals or organizations rather than sending out mass emails to random users. These attacks are highly…

What is Spim?

TLDR Spim, a form of spam, refers to unsolicited messages sent over instant messaging (IM) platforms. While spam typically targets email, spim affects communication on messaging applications such as WhatsApp,…